Microsoft Internet Explorer 6 - 'JavaScript:' URI in 'Refresh' Header Cross-Site Scripting

source: https://www.securityfocus.com/bid/35570/info Microsoft Internet Explorer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code in the context of the user running the...

Mandrake Security Advisory MDVSA-2009:110 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory MDVSA-2009:110. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Security breach affects 15,487 Honolulu students

More than 15,000 students at Kapiolani Community College in Honolulu face an identity theft risk because of an Internet security breach, school officials said. School officials found a computer on April 15 with the personal information of 15, 487 students who applied for financial aid between...

Survey: 1/3 of employees would steal sensitive data

From PC Advisor Carrie-Ann Skinner More than one third of employees would steal sensitive company information if they thought they could earn a decent price from the theft, says Infosecurity Europe. Research by the security event organiser revealed that of those willing to steal sensitive data, 6...

USN-764-1: Firefox and Xulrunner vulnerabilities

Several flaws were discovered in the browser engine. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. CVE-2009-1302, CVE-2009-1303, CVE-2009-1304,...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-6194)

The Mozilla Firefox Browser was refreshed to the current MOZILLA18 branch state around fix level 2.0.0.22. Security issues identified as being fixed are: MFSA 2009-01 / CVE-2009-0352 / CVE-2009-0353: Mozilla developers identified and fixed several stability bugs in the browser engine used in...

Data thieves love tax time

From internetnews.com Alex Goldman Valentine’s Day is a the season for social engineering, as many people hope for a note from a mysterious and fascinating someone and are therefore more willing to open suspicious messages and attachments than at any other time. Unfortunately, it is now the seaso...

Conficker business model: Scareware and spam

The Conficker botnet has started to use its peer-to-peer communication system to update itself and download scareware fake anti-virus programs to millions of infected Windows machines, according to malware hunters tracking the threat. The latest Conficker mutant comes a week after a heavily-hyped...

In weak economy, IT pros could turn to e-crime

By Jeremy Kirk, IDG News Service Enterprises increasingly feel their employees will be more willing to steal data or sell insider knowledge due to the poor economy, according to an annual security survey infoworld.com conducted by KPMG. Sixty-six percent of respondents felt that out-of-work IT...

Ubuntu Update for firefox vulnerabilities USN-428-1

Ubuntu Update for Linux kernel vulnerabilities USN-428-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4281.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for firefox vulnerabilities USN-428-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for firefox vulnerabilities USN-535-1

Ubuntu Update for Linux kernel vulnerabilities USN-535-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5351.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for firefox vulnerabilities USN-535-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Hackers can sniff keystrokes from thin air

By Elinor Mills, CNET Presenters at the CanSecWest security conference detailed on Thursday how they can sniff data by analyzing keystroke vibrations using a laser trained on a shiny laptop or through electrical signals coming from a PC connected to a PS/2 keyboard and plugged into a socket. Usin...

Wordpress fMoblog 2.1 SQL Injection

Wordpress Plugin fMoblog Remote SQL Injection Vulnerability Plugin Home: http://www.fahlstad.se/wp-plugins/fmoblog/ Plugin Version: 2.1 Author: strange kevin Email: [email protected] Google Dork: "Gallery powered by fMoblog" Exploit:...

Mozilla Foundation Security Advisory 2009-09

Mozilla Foundation Security Advisory 2009-09 Title: XML data theft via RDFXMLDataSource and cross-domain redirect Impact: High Announced: March 4, 2009 Reporter: Georgi Guninski Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.7 Thunderbird 2.0.0.21 SeaMonkey 1.1.15 Description...

RedHat Update for thunderbird RHSA-2008:0105-01

Check for the Version of thunderbird OpenVAS Vulnerability Test RedHat Update for thunderbird RHSA-2008:0105-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Critical Firefox flaws flagged, fixed

The open-source Mozilla group has released Firefox 3.0.7 with fixes for at least eight security flaws, some rated critical. The most serious of the vulnerabilities could be exploited by attackers to run code and install software, requiring no user interaction beyond normal browsing, Mozilla warne...

RHEL 4 / 5 : firefox (RHSA-2009:0315)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:0315 advisory. - libpng arbitrary free flaw CVE-2009-0040 - Firefox 3 Layout Engine Crashes CVE-2009-0771 - Firefox 2 and 3 - Layout engine crashes...

CVE-2008-6354

The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to ASPired2poll.mdb...

More than 50% of workers stealing data when they leave jobs

Tens of millions of people have lost their jobs in recent months, and a huge number of them are taking proprieatry company data with them when they leave, according to a new study. The study shows that almost 60 percent of people who leave or are fired from a job are swiping information. Brian...

CVE-2008-6321

CF Shopkart 5.2.2 stores cfshopkart52.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via a direct request...